October 2026 CVE archive
Records last modified in NIST NVD between Oct 1 and Oct 31, 2026 (UTC). Data imported from the NVD CVE API 2.0 and the CISA KEV catalog; each record shows its own source and verification time. The modified view only includes records that were CRITICAL or CISA-KEV-listed when imported — it is not a complete list of every modification.
Total records
24,320
Critical
3,272
High
7,879
Medium
7,569
Low
735
Severity not reported
4,865
In CISA KEV
188
Most affected vendors (by CPE data where available): microsoft (1424), google (825), linux (722), ibm (323), oracle (193), mozilla (182), adobe (165), broadcom (118), apache (116), fabian (98)
| CVE | Severity | CVSS | KEV | Vendor / product | Published | Modified |
|---|---|---|---|---|---|---|
| CVE-2025-11371 Gladinet CentreStack and Triofox Files or Directories Accessible to External Par... |
high | 7.5 | Listed | Gladinet / CentreStack and Triofox | 2025-10-09 | 2026-10-08 |
| CVE-2025-61884 Oracle E-Business Suite Server-Side Request Forgery (SSRF) Vulnerability |
high | 7.5 | Listed | Oracle / E-Business Suite | 2025-10-12 | 2026-10-08 |
| CVE-2026-17647 IBM Financial Transaction Manager (FTM) for RedHat OpenShift could allow a local... |
high | 8.8 | — | Ibm / financial transaction manager | 2026-09-22 | 2026-10-08 |
| CVE-2026-18066 IBM Financial Transaction Manager (FTM) for RedHat OpenShift could allow a local... |
high | 7.1 | — | Ibm / financial transaction manager | 2026-09-22 | 2026-10-08 |
| CVE-2026-106189 Code injection in ReaderMode in Google Chrome on on iOS prior to 155.0.8059.39 a... |
high | 7.3 | — | Google / chrome | 2026-10-06 | 2026-10-08 |
| CVE-2026-106190 Use after free in Media in Google Chrome prior to 155.0.8059.39 allowed a remote... |
high | 8.8 | — | Google / chrome | 2026-10-06 | 2026-10-08 |
| CVE-2026-106191 Missing authorization in Actor in Google Chrome prior to 155.0.8059.39 allowed a... |
high | 8.3 | — | Google / chrome | 2026-10-06 | 2026-10-08 |
| CVE-2026-106186 Uncontrolled search path element in CredentialProvider in Google Chrome on on Wi... |
high | 8.6 | — | Google / chrome | 2026-10-06 | 2026-10-08 |
| CVE-2026-106193 Use after free in Parser in Google Chrome prior to 155.0.8059.39 allowed a remot... |
high | 8.8 | — | Google / chrome | 2026-10-06 | 2026-10-08 |
| CVE-2026-106194 Missing authorization in WebAppInstalls in Google Chrome prior to 155.0.8059.39... |
high | 8.3 | — | Google / chrome | 2026-10-06 | 2026-10-08 |
| CVE-2026-106200 Use after free in Track in Google Chrome prior to 155.0.8059.39 allowed a remote... |
high | 8.8 | — | Google / chrome | 2026-10-06 | 2026-10-08 |
| CVE-2026-106301 Confused deputy in Contextual Tasks in Google Chrome prior to 155.0.8059.39 allo... |
high | 8.1 | — | Google / chrome | 2026-10-06 | 2026-10-08 |
| CVE-2025-3928 Commvault Web Server Unspecified Vulnerability |
high | 8.8 | Listed | Commvault / Web Server | 2025-04-25 | 2026-10-08 |
| CVE-2026-91791 When processing a specially crafted PDF file, Foxit PDF Editor/Reader may encoun... |
high | 7.8 | — | Foxit / pdf editor | 2026-09-23 | 2026-10-08 |
| CVE-2026-91790 When rendering the page image, Foxit PDF Editor/Reader fails to perform validati... |
high | 7.8 | — | Foxit / pdf editor | 2026-09-23 | 2026-10-08 |
| CVE-2026-91789 Foxit PDF Editor/Reader’s U3D/GIF texture decoding path contained insufficient v... |
high | 7.8 | — | Foxit / pdf editor | 2026-09-23 | 2026-10-08 |
| CVE-2026-91806 A use-after-free vulnerability exists in Foxit PDF Editor/Reader’s handling of P... |
high | 7.8 | — | Foxit / pdf editor | 2026-09-23 | 2026-10-08 |
| CVE-2026-91805 A use-after-free vulnerability exists in Foxit PDF Editor/Reader’s PDF page-tree... |
high | 7.8 | — | Foxit / pdf editor | 2026-09-23 | 2026-10-08 |
| CVE-2026-106201 Race condition in V8 in Google Chrome prior to 155.0.8059.39 allowed a remote at... |
high | 8.8 | — | Google / chrome | 2026-10-06 | 2026-10-08 |
| CVE-2026-106203 Incomplete cleanup in Autofill in Google Chrome on on iOS prior to 155.0.8059.39... |
high | 8.8 | — | Google / chrome | 2026-10-06 | 2026-10-08 |
| CVE-2026-106204 Use after free in PDF in Google Chrome prior to 155.0.8059.39 allowed a remote a... |
high | 8.8 | — | Google / chrome | 2026-10-06 | 2026-10-08 |
| CVE-2026-106205 Missing authorization in Passwords in Google Chrome on on Android prior to 155.0... |
high | 8.1 | — | Google / chrome | 2026-10-06 | 2026-10-08 |
| CVE-2026-106207 Race condition in V8 in Google Chrome prior to 155.0.8059.39 allowed a remote at... |
high | 8.8 | — | Google / chrome | 2026-10-06 | 2026-10-08 |
| CVE-2020-1054 Microsoft Win32k Privilege Escalation Vulnerability |
high | 7.0 | Listed | Microsoft / Win32k | 2020-05-21 | 2026-10-08 |
| CVE-2019-8720 WebKitGTK Memory Corruption Vulnerability |
high | 8.8 | Listed | WebKitGTK / WebKitGTK | 2023-03-06 | 2026-10-08 |
| CVE-2025-5777 Citrix NetScaler ADC and Gateway Out-of-Bounds Read Vulnerability |
high | 7.5 | Listed | Citrix / NetScaler ADC and Gateway | 2025-06-17 | 2026-10-08 |
| CVE-2023-35311 Microsoft Outlook Security Feature Bypass Vulnerability |
high | 8.8 | Listed | Microsoft / Outlook | 2023-07-11 | 2026-10-08 |
| CVE-2021-41277 Metabase GeoJSON API Local File Inclusion Vulnerability |
high | 7.5 | Listed | Metabase / Metabase | 2021-11-17 | 2026-10-08 |
| CVE-2026-97679 IBM Langflow OSS 1.0.0 through 1.12.2 could allow a remote authenticated attacke... |
high | 8.8 | — | Langflow / langflow | 2026-10-07 | 2026-10-08 |
| CVE-2026-97680 IBM Langflow OSS 1.0.0 through 1.12.2 could allow a remote authenticated attacke... |
high | 8.3 | — | Langflow / langflow | 2026-10-07 | 2026-10-08 |
| CVE-2026-97673 IBM Langflow OSS 1.0.0 through 1.12.2 could allow a remote authenticated attacke... |
high | 8.8 | — | Langflow / langflow | 2026-10-07 | 2026-10-08 |
| CVE-2026-97676 IBM Langflow OSS 1.0.0 through 1.12.2 could allow a remote authenticated attacke... |
high | 8.8 | — | Langflow / langflow | 2026-10-07 | 2026-10-08 |
| CVE-2026-79810 Remote code execution vulnerabilities exist in the affected interface of HPE Net... |
high | 7.2 | — | — | 2026-10-06 | 2026-10-08 |
| CVE-2026-79811 A SQL injection vulnerability in the API of ClearPass Policy Manager could allow... |
high | 7.2 | — | — | 2026-10-06 | 2026-10-08 |
| CVE-2026-79806 A privilege escalation vulnerability in the ClearPass Policy Manager OnGuard Lin... |
high | 7.8 | — | — | 2026-10-06 | 2026-10-08 |
| CVE-2026-79807 A missing integrity verification vulnerability in the Windows client software fo... |
high | 7.8 | — | — | 2026-10-06 | 2026-10-08 |
| CVE-2026-79808 A buffer overflow vulnerability exists in the OnGuard agent of ClearPass Policy... |
high | 7.8 | — | — | 2026-10-06 | 2026-10-08 |
| CVE-2026-79802 A command injection vulnerability exists in the client software of ClearPass Pol... |
high | 8.8 | — | — | 2026-10-06 | 2026-10-08 |
| CVE-2026-79803 A command injection vulnerability exists in the API of ClearPass Policy Manager. |
high | 8.8 | — | — | 2026-10-06 | 2026-10-08 |
| CVE-2026-79797 An improper access control vulnerability exists in the Android client applicatio... |
high | 8.8 | — | — | 2026-10-06 | 2026-10-08 |
Sources: NIST NVD (CVE API 2.0) and the CISA KEV catalog. Severity is as stated by the source; missing values are shown as “not reported”, never estimated.